From 75def3e3891e156a7d6c8068ee256be8a6f1b4df Mon Sep 17 00:00:00 2001 From: Fabio Sinibaldi Date: Wed, 5 Aug 2026 12:58:07 +0200 Subject: [PATCH] Open port udp 21820 for gerbil --- .../playbooks/roles/pangolin/templates/docker-compose.yml.j2 | 1 + ansible/playbooks/roles/prepare_node/tasks/iptables.yaml | 3 ++- 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/ansible/playbooks/roles/pangolin/templates/docker-compose.yml.j2 b/ansible/playbooks/roles/pangolin/templates/docker-compose.yml.j2 index 5aeded0..9bc57ce 100644 --- a/ansible/playbooks/roles/pangolin/templates/docker-compose.yml.j2 +++ b/ansible/playbooks/roles/pangolin/templates/docker-compose.yml.j2 @@ -30,6 +30,7 @@ services: - SYS_MODULE ports: - 51820:51820/udp + - 21820:21820/udp - 443:443 # Port for traefik because of the network_mode - 80:80 # Port for traefik because of the network_mode diff --git a/ansible/playbooks/roles/prepare_node/tasks/iptables.yaml b/ansible/playbooks/roles/prepare_node/tasks/iptables.yaml index d98b3b5..0fb2364 100644 --- a/ansible/playbooks/roles/prepare_node/tasks/iptables.yaml +++ b/ansible/playbooks/roles/prepare_node/tasks/iptables.yaml @@ -11,11 +11,12 @@ - { protocol: tcp, port: '80', description: 'HTTP for Lets Encrypt ACME challenge' } - { protocol: tcp, port: '443', description: 'HTTPS for secure web traffic' } - { protocol: udp, port: '51820', description: 'WireGuard VPN traffic' } + - { protocol: udp, port: '21820', description: 'WireGuard VPN traffic clients' } become: true become_exe: "{{ become_exe_value }}" register: iptables_result - name: Display iptables configuration status ansible.builtin.debug: - msg: "Configured firewall rules for ports: 80 (HTTP), 443 (HTTPS), 51820 (WireGuard UDP)" + msg: "Configured firewall rules for ports: 80 (HTTP), 443 (HTTPS), 51820 (WireGuard UDP), 21820 (VPN UDP clients)" when: iptables_result is changed \ No newline at end of file